Exam Preparation Quiz

Explanations for each answer:

• Create a service principal is incorrect. Service principals are an authentication method for Azure services, but they require credential management and rotation, which doesn't align with the requirement to minimize administrative effort and credential management.
• Create an Azure Automation account is incorrect. Azure Automation accounts are used for process automation, configuration management, and update management across Azure and non-Azure environments, but they aren't specifically designed for Azure Pipeline agents and would add unnecessary complexity.
• On each virtual machine, enable a system-assigned managed identity is incorrect. System-assigned managed identities are tied to specific resources and are deleted when the resource is deleted. This option would require managing multiple identities separately, increasing administrative overhead rather than minimizing it.
• Create a user-assigned managed identity is correct. User-assigned managed identities can be shared across multiple resources, allowing both virtual machines to use the same identity. This minimizes administrative effort and eliminates credential management concerns, as the identity is managed by Azure.